MCP: Ensure CloudFront distributions have WAF enabled

[bwbaker1]

Description

AWS WAF is a web application firewall that helps protect web applications and APIs from attacks. It allows you to configure a set of rules, called a web access control list (web ACL), that allow, block, or count web requests based on customizable web security rules and conditions that you define. Ensure your CloudFront distribution is associated with an AWS WAF web ACL to help protect it from malicious attacks.

Non-compliant resources:
arn:aws:cloudfront::237694371684:distribution/E2HG14BAFN6FZ5
arn:aws:cloudfront::237694371684:distribution/E1COX9APJFTK2X
arn:aws:cloudfront::237694371684:distribution/E26TIGKCB37R81

Remediation steps: https://docs.aws.amazon.com/securityhub/latest/userguide/cloudfront-controls.html#cloudfront-6

Acceptance Criteria

• CloudFront distribution is associated with an AWS WAF web ACL